Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa
File:                     Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa (raw, json)
Hash identifier:          rD6KK9/ASgvw5nvASE9Sl3FiaZmYww7hdpWu3vSwSew=
Subject key identifier:   66:0E:D6:96:A0:07:F1:B0:D8:08:40:9A:0B:04:49:9D:DB:F7:43:0E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa
Signing time:             Tue 30 Apr 2024 01:49:38 +0000
ROA not before:           Tue 30 Apr 2024 01:49:38 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:49:38 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=660ED696A007F1B0D808409A0B04499DDBF7430E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:c1:c3:29:7a:d4:0f:46:05:39:cc:bc:7e:
                    3e:b7:cb:8f:3c:bf:31:15:38:b9:78:e6:fe:5a:28:
                    23:98:2e:88:c4:1f:8c:e6:a9:46:0a:d5:2a:21:eb:
                    3b:36:46:4e:8e:ff:2e:67:20:cb:23:db:4c:ca:6f:
                    dd:ca:c2:8c:3b:9d:7d:c6:31:c3:2b:a7:ae:c3:7f:
                    7e:a0:ea:1a:8d:76:79:3a:40:3f:a5:2c:c4:87:31:
                    00:23:c2:66:e5:bc:55:72:28:ff:d5:5f:b4:66:24:
                    56:fb:1f:cc:82:39:33:8e:be:ee:11:92:28:a7:c7:
                    d5:a1:ce:d2:7a:d4:c0:7b:80:95:a0:b0:ed:8e:06:
                    65:61:1b:36:de:78:fe:52:e3:a7:be:a0:50:de:ad:
                    ad:9c:2e:8d:c6:b7:04:3d:be:b6:46:d6:06:a0:56:
                    cc:70:b5:fe:99:7c:0c:21:f8:26:1d:f3:72:ba:8e:
                    a0:35:21:13:ca:f9:df:06:46:8e:eb:5f:e5:34:96:
                    a5:6b:30:07:96:1b:a7:76:34:61:d0:f2:aa:12:0d:
                    0d:65:ff:c2:fc:50:98:94:33:e7:24:8a:8d:96:c9:
                    3d:b3:ce:4f:ef:ef:58:cc:1d:76:52:95:15:70:f3:
                    92:5b:94:78:c3:6e:52:ed:71:7b:98:aa:42:f6:1d:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0E:D6:96:A0:07:F1:B0:D8:08:40:9A:0B:04:49:9D:DB:F7:43:0E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e6:34:cb:dc:5c:4d:43:18:b5:1b:f9:eb:0b:06:2c:9f:85:9c:
         31:c5:4a:b0:ae:c9:a9:0e:46:cf:0c:fe:05:26:a8:08:21:24:
         a2:45:f0:60:16:72:d3:14:47:40:59:ca:fc:a1:c7:24:2b:49:
         d6:4c:d1:a0:e4:0a:b2:f9:b8:86:cb:4b:ac:d4:d6:66:2f:fe:
         b9:1e:fd:fb:16:a7:e3:b6:d8:12:21:48:c3:ca:45:65:a7:9d:
         e1:26:ea:6d:fd:9a:4a:f1:a9:d4:21:ee:76:e8:9e:09:54:53:
         fe:bf:cf:dc:84:0c:0a:e7:fa:36:cf:ea:fd:92:b3:c0:74:40:
         a2:24:45:94:a3:90:75:6d:35:bd:ac:de:c2:ad:55:35:8c:85:
         02:27:e4:54:e6:bd:ce:4d:d6:c2:7c:3e:dd:50:c2:44:db:e7:
         14:d8:8a:d3:dc:4e:90:26:67:57:5d:02:4e:0b:df:41:b3:b3:
         06:b6:f5:1f:92:b1:c1:04:09:97:80:02:03:06:1c:a1:9f:19:
         a3:17:ea:54:9e:ac:ec:5d:24:ba:52:60:a7:ec:b9:0f:58:05:
         67:a6:90:eb:b5:4c:41:d3:21:6e:31:a3:39:45:97:d2:97:77:
         d4:0e:4a:da:8f:f0:75:8e:9b:38:e2:20:50:f9:b6:43:ab:04:
         69:ab:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:47 2024 by rpki-client on console-fra.rpki-client.org